Adding CSRF protection